Compliance Framework

A leading manufacturer sees compliance as an ongoing process with three main activities. You need to prevent non-compliance by providing senior management commitment, risk assessment, policies, procedures, and training. You need to detect non-compliance by having compliance reviews, monitoring dashboards, ombudsperson network, and compliance audits. And you need a non-compliance response having an investigation unit, employee discipline, communication, and systems improvement. Part of their risk assessment is running "Be a Criminal Day" for staff handling money to identify ways that bad employees or temps could steal money from the company or customers. It is then important to respond immediately to identified risks and improve processes and security.